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(g) A system for controlling access to broadcast transmissions. 

@ A system for controlling access to broadcast transmissions including a transmitter having a transmission 
encoder for scrambling the broadcast, a multiplicity of subscriber receivers, each having an identical receiving 
decoder, containing no secret cryptographic keys, for descrambling the broadcast and a plurality of selectable 
and portable executing apparatus each being operatively associatable with a receiving decoder at a partially 
different given time and each executing generally identical operations to generate a seed for use by the 
associated receiving decoder to enable the receiving decoder to descramble the broadcast. 
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FIELD OF THE INVENTION 



The present Invention relates to broadcast transmission Systems and techniques. 



BACKGROUND OF THE INVENTION 

5 

There is known in the patent literature a great variety of systems and techniques for broadcast 
transmission. More particularly systems for controlling access to broadcast transmissions are described in 
the foliowing publication: 

70 Satellite and Cable TV Scrambling and Descrambling . by Brent Gale and Frank Baylln, published by 
Baylin/Gali~Productlons, Boulder, Colorado, 1986. 

Smart cards, plastic cards resembling credit cards with microprocessor inside of them, are known in the 
art. They are described In the book, Smart Cards, The New Bank Cards, by Jerome Svigals and published 
by Macmiilan Publishing Company, NY, 1987. 

75 

SUMMARY OF THE INVENTION 



20 The present invention seeks to provide improved apparatus and techniques for controlling access to 
broadcast transmissions. For the purposes of the present specification and claims, broadcast transmissions 
are deemed to include both audio and video, combined and separately, whether transmitted by wire or by 
wireless techniques. 

There Is thus provided in accordance with a preferred embodiment of the present Invention a system 
25 for controlling access to broadcast transmissions including a transmitter having a transmission encoder for 
scrambling the broadcast, a multiplicity of subscriber receivers, each having an Identical receiving decoder, 
containing no secret cryptographic keys, for descrambling the broadcast and a plurality of selectable and 
portable executing apparatus each being operatlvely associatable with a receiving decoder at a partially 
different given time and each executing generally identical operations to generate a seed for use by the 
30 associated receiving decoder to enable the receiving decoder to descramble the broadcast. 

In accordance with a preferred embodiment of the present invention, the executing apparatus includes 
apparatus for actively executing an algorithm. 

In accordance with another embodiment of the present Invention, the executing apparatus includes 
apparatus for providing instructions and data for an algorithm executed in the decoder. 
35 In accordance with one embodiment of the present invention, the executing apparatus includes all of the 
instructions required to descramble the transmission. In accordance with another embodiment of the 
present invention, the executing apparatus provides only part of the instructions required to descramble the 
transmission. 

In accordance with a preferred embodiment of the present invention, the executing apparatus comprises 
40 apparatus for providing proof of authenticity to the receiving decoder. The proof of authenticity is preferably 
a public key proof of authenticity and preferably a Fiat-Shamir public key proof of authenticity. 

In accordance with a preferred embodiment of the present invention, each executing apparatus contains 
a separate identification element which is sensible by a decoder. 

Further, in accordance with a preferred embodiment of the present invention, each executing apparatus 
45 comprises an element which indicates programming entitlements to the decoder. 

In accordance with a preferred embodiment of the present invention, the element which indicates 
programming entitlements to the decoder is modified by information contained in the transmitted broadcast. 

In accordance with a preferred embodiment of the present invention, the decoder comprises a mailbox 
for receiving data from broadcast transmissions and from the a first of the plurality of selectable executing 
50 apparatus. Further, in accordance with a preferred embodiment of the present invention, the executing 
apparatus is operative to access the mailbox. Such data may include, for example, activation data for 
enabling operation of the executing apparatus and entitlement information. 

In accordance with a preferred embodiment of the present invention, the executing apparatus may 
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contain information which can be accessed by the decoder for modifying software thereof. 

In accordance with a preferred embodiment of the present invention, the executing apparatus comprises 
apparatus for generating displayed messages via the decoder. 

In accordance with a preferred embodiment of the present invention, the decoder Is operative to 
5 generate displayed messages originating from any of the following sources: the broadcast, the decoder and 
the executing apparatus. 

Further, in accordance with a preferred embodiment of the present invention, the displayed messages 
may be assigned designated priorities. 

There is provided, in accordance with the present invention, a system for transferring information 
10 comprising a plurality of portable card apparatus each comprising microprocessor apparatus for generating 
and transmitting data to be stored and fixed storage apparatus for receiving the data from a first of the 
plurality of card apparatus, for storing the data, and for enabling a second of the plurality of card apparatus 
to remove the data therefrom. 

There is additionally provided, in accordance with the present invention, a system for transferring 
75 information comprising computing apparatus for generating and transmitting a first set of data to be stored, 
a plurality of portable card apparatus each comprising microprocessor apparatus for generating and 
transmitting a second set of data to be stored and fixed storage apparatus for receiving at least one of the 
first and second data from the computing apparatus and a first of the plurality of card apparatus, for storing 
the information, and for enabling a second of the plurality of card apparatus to remove the at least one of 
20 the first and second data therefrom. 



BRIEF DESCRIPTION OF THE DRAWING 

25 

The present invention will be understood and appreciated more fully from the following detailed 

description, tal<en in conjunction with the drawings in which: 

Fig. 1 is a generalized block diagram Illustration of a broadcast system constructed and operative In 
accordance with a preferred embodiment of the present invention; 
30 Fig. 2 is a more detailed block diagram illustration of the transmission end of the system of Fig. 1 ; 
Fig. 3 is a more detailed block diagram illustration of the reception end of the system of Fig. 1; 
Fig. 4 is a generalized illustration of a communications protocol employed in accordance with a preferred 
embodiment of the invention; 

Fig. 5 is an illustration of a information exchange protocol for use with a verifier and a smart card in 
35 accordance with a preferred embodiment of the present invention; and 

Fig. 6 is an illustration of a Fiat-Shamir authentication protocol useful in the present invention. 



DETAILED DESCRIPTION OF A PREFERRED EMBODIMENT 

40 

Reference is now made to Figs. 1 - 3, which illustrate the broadcast system constructed and operative 
in accordance with a preferred embodiment of the present Invention. The broadcast system preferably 
comprises a security computer 10, such as an IBM AT having multiple serial communications links. The 

45 security computer 10 receives inputs from a security database computer 12, such as an IBM AT, which 
stores programming information as well as information relating to urgent or periodic subscriber actions. 
Typically an urgent subscriber action could consist of Immediate, on-line activation, deactivation or re- 
activation of viewing entitlements. Typically a periodic subscriber action is a blacklisting order or a message 
to be transmitted periodically so that when the subscriber is tuned to the system, the order or message will 

50 be received and suitably processed. 

The security computer 10 also receives an input from a subscriber management system 14, typically 
embodied in a large mainframe computer, commercially available from IBM or other major manufacturers. 
The subscriber management system stores details of all subscribers, their payment status and their 
entitlements. 

55 In accordance with a preferred embodiment of the invention, the security computer 10 interfaces with 

one or more smart cards 16. Such smart cards are well known and are described in Smart Cards, The New 
Bank Cards, by Jerome Svigals. The smart cards preferably contain two computer programs. The first 
computer program contains a seed generating algorithm for producing a seed which is used in signal 
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scrambling and descrambling at both ends of the system. The second progrann contains a signature 
protocol which appends a suitably hashed signature to all Information regarding entitlements when 
transmitted over the system. 

The security computer 10 supplies data, including. Inter alia, unscrambled data, data beanng a 
5 signature and a seed to an encoder 18, which typically is located on the premises of a broadcasting station. 
The operation of the apparatus of elements 10, 12, 14 and 16 may be emulated by a computer program 
whose object code is attached hereto as Annex A, 

The encoder 18 Is typically an encoder which is commercially available from Thomson CSF 
Laboratoires Electronlques de Rennes, Cesson-Sevigne, France. The encoder 18 is operative, using the 
10 seed received via the security computer 10. to scramble all or part of an audio-video TV program received 
from any suitable program source, such as a VCR. The encoder 18 is also operative to modulate the data 
which is received from the security computer so as to enable both the scrambled program and the data to 
be transmitted together. It will be appreciated that the seed is not modulated and thus, Is not transmitted. 
The modulation technique may be selected at will from known techniques provided that it is suitable for 
15 use with the encoder 18. In accordance with a preferred embodiment of the invention, the data is inserted 
on unused video lines. 

The output of the encoder 18 is broadcast by any suitable technique, either by wire or wireless 
apparatus. In the illustrated embodiment, the encoder outputs to a ground station 20, which communicates 
via a satellite 22 in geosynchronous orbit of the earth with a multiplicity of receiving ground stations 24, 
20 each representing a subscriber. 

The signals received by each receiving ground station 24 are supplied to a receiver 26, typically 
commercially available from Amstrad of the UK. The receiver 26 is operative to convert the signals received 
thereby, which are selected by the subscriber, to baseband video. If the baseband video does not require 
descrambling, the receiver 26 remodulates the baseband video typically on a pre-selected channel for 
25 reception and display on a conventional television display 28. 

Scrambled signals are supplied by the receiver 26 to a decoder 30, typically commercially available 
from Ferguson Limited, Enfield, Middlesex, England or from Thomson L.E.R.E.A. lllkirch, France. 

In accordance with a preferred embodiment of the present invention, the decoder is operative together 
with a smart card 32, which contains a seed generation algorithm. It is a particular feature of the present 
30 invention, that the decoders contain no cryptographic secrets and that each of the smart cards 32 
associated with the multiplicity of receivers 26 execute the identical seed generation algorithm on the data 
sent from the security computer 10 and thus, produce the Identical seed used by encoder 18 to scramble 
the broadcast signal. It is an additional feature of the present invention that the receivers 26 are identical 
and the smart card 32 from one subscriber can operate in the receiver 26 of a second subscriber, thereby 
35 allowing the second subscriber to view, in his home, the programs received by the first subscriber. 

In accordance with an alternative embodiment of the invention, the use of either or both of smart cards 
16 and 32 may be eliminated in favor of simpler, but less secure memory cards. In such a case, the 
memory card contains data but not the seed generating algorithm, in such a case, the security computer 10 
transmits Instructions to the. decoder 30 enabling it to use the data in the memory card to reproduce the 
40 seed. 

In the embodiment wherein cards 16 and 32 or at least card 32 is a smart card, the smart card 32 
includes a first program which verifies the genuineness of the hashed signature produced by card 16 and 
transmitted through the system, thus rejecting entitlement data bearing no signature or a non-genuine 
signature. The smart card 32 also contains a program for generating the seed for enabling the decoder to 
descramble the video TV program. The object code for a smart card 32 manufactured by News Gem 
Smartcard International Ltd. of Livingston. Scotland, Is attached hereto as Annex B. 

Reference is now made to Fig. 2 which illustrates the transmission apparatus of the present invention. 
As mentioned hereinabove, security computer 10 receives subscriber and programming data from sub- 
scriber management system 14 and security database 12. Security computer 10 sends a portion of the data 
relating to operations to be performed by smart card 32 to the smart card 16, via a smart card coupler 34, 
such as those commercially available from GemPlus of Gemenos, France. Smart card 16 appends a digital 
signature to the data for smart card 32 whereby the digital signature is generated by the second algorithm 
stored within the smart card 16. The smart card 16 additionally generates the scrambling seed to be used 
by the encoder 18. 

56 The two algorithms stored in smart cards 16 and 32 are typically hashing functions operating on the 
data for smart card 32. The hashing function of the second algorithm, that for digital signature generation, 
typically is iterated a few times. The hashing function of the first algorithm, that for seed generation, 
typically Is iterated a multiplicity of times. Hashing functions are described in The Art of Computer 
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Programming, Vol 2:Seminumencal Algorithms by Donald E. Knuth. 

The data foTsmart card 32 and the scrambling seed are sent from the smart card 16 through the 
security computer 10 to the encoder 18. The scrambling seed in loaded into a Pseudo-Random Bit 
Sequencer (PRBS) 40 which produces from it a pseudo-random sequence of bits. The sequence of bits is 
5 sent to a scrambler 42 which utilizes it to scramble the broadcast signal, which may come from a VCR, 

The programming and security data as well as the data for smart card 32 is appended to the scrambled 
broadcast signal, by means of a data inserter 44, and the combined signal Is sent to the ground station 20 
to be modulated and transmitted. 

Reference is now made to Fig. 3 which illustrates the reception end of the system of Fig. 1. As 
10 mentioned hereinabove, the combined signal is received by receiving ground station 24 and is sent to 
receiver 26 which demodulates it into video baseband. The video baseband Is then sent In parallel to both a 
descrambler 46 and a data demodulator 48 of decoder 30. 

Data demodulator 48 extracts the data from the combined signal and sends it to a verifier 50. Verifier 50 
then sends a portion of the data to the smart card 32 for verification of entitlements and for seed generation. 
75 The portion of the data which is sent is that dealing with entitlements and seed generation. 

Smart card 32 receives the data portion and, if the entitlement information enclosed therein indicates 
that the subscriber is entitled to view the selected program, it utilizes the data portion to generate a 
decoding seed which is generally equivalent to the scrambling seed. If the subscriber is not entitled to 
receive the video signal, the decoding seed will not match the scrambling seed. Smart card 32 also 
20 generates on-screen displays based on the received data portion. For example, the received data portion 
typically includes a channel identification number and the current date. If the subscriber Is not entitled to 
view the currently selected channel, an on-screen display message such as THIS CHANNEL IS BLOCKED, 
is generated. If the current date is beyond an expiration date stored in smart card 32, an on-screen display 
message such as YOUR CARD HAS EXPIRED is generated. It will be appreciated that typically only one 
25 on-screen display message can be displayed at one time. 

The generated seed and on-screen displays, if any, are sent to the verifier 50. The verifier 50 sends the 
on-screen displays to an on-screen display inserter 52 which Inserts the display into the baseband video 
after it has left the descrambler 46. The decoding seed Is sent to a PRBS 54 which generates a pseudo- 
random bit sequence, generally identical to the scrambling seed, which is utilized by the descrambler 46 for 
30 descrambling the baseband video signal. 

The verifier 50 performs the following six additional functions: 

1. An authentication operation, as described hereinbelow and with reference to Fig. 6, for verifying that 
the smart card is authentic; 

2. Generation of the decoding seed, in conjunction with the security computer 10, and management of 
36 pay-per-view programs, in the embodiment where the smart card 32 comprises a memory card. The 

algorithm used for seed generation is a hashing function operating on data from the security computer 
10. The result is used as the decoding seed if the results of instructions such as comparisons between 
data stored in the memory card and data sent from the security computer 10 are positive; 

3. comparison of priority levels of on-screen display messages, such as between those generated by 
40 smart card 32 and those sent from the security computer 10, for determining which message should be 

displayed and sending of the message to the on-screen display inserter 52; 

4. display of the smart card 32 identification number upon request from the security computer 10; 

5. blacklisting of smart cards 32 which contain an illegal identification number, as directed by the 
security computer 10; and 

45 6. maintenance of a mailbox used to store messages from an old to a new smart card and from the 
security computer 10 to the smart card 32. Such messages may include enabling of the new card based 
on the message left by the old card. For pay-per-view systems where the smart card 32 stores the 
amount of money Initially paid by the subscriber and deletes a predetermined amount of money for each 
program viewed, at the end of the subscription period, the old smart card 32 leaves in the mailbox an 

50 amount of money left to the subscriber (if any). The new smart card 32 adds to the amount stored within 
it the amount left in the mailbox. 

Executable code for a verifier 50 incorporated into an 8052 processor from Intel is attached hereto as 
Annex C. 

The on-screen display inserter 52 inserts the on-screen display messages into the baseband video 
55 output of the descrambler 46 and the combined signal is sent to the receiver 26 for remodulation and for 
transmission to the TV set 28. 

Reference is now made to Fig. 4 which illustrates a communications protocol typically used in the 
system of the present invention. Beginning at the lowest level, the physical level, the ground station 
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transmitter 20 transmits 8 broadcast signal via a satellite link to a receiver apparatus 60 which comprises 
ground station receiver 24 and receiver 26. . 

At the data level, the data is inserted into the vertical blanking interval of the broadcast signal via the 
data inserter 44 of the encoder 18 and removed via the data demodulator 48 of decoder 30. The encoder 
5 18 and decoder 30 may communicate between themselves without, affecting the operation of the system of 
the present invention. 

At the session level, the security computer 10 communicates with the verifier 50 of decoder 30 via data 
packets of the data. In the preferred embodiment of the present Invention, the data packets are 32-byte 
packets. The information passed is system and subscriber infomnation. authorization to perform the 

10 authentication operation and/or to display the smart card identification number, as described hereinabove. 
The session level communicates with the data level via an RS-232 protocol between the security computer 
10 and the encoder 18 and via a parallel communication protocol, described In Annex D, between the 
verifier 50 and the data demodulator 48. 

Finally, the application level is a communication level between the smart card 16 attached to the 

15 security computer 10 and the smart card 32 attached to the decoder 30. The information passed relates to 
seed and signature generation, and channel and date information. 

Reference is now made to Fig. 5 which illustrates a communications protocol between smart card 32 
and verifier 50. Verifier 50 sends a data packet to the smart card 32 and the smart card 32 operates on the 
data packet to generate a decoding seed and on-screen display messages. Additionally, the smart card 32 

20 receives mail from the mailbox of verifier 50 as well as sends mall to the mailbox. 

In accordance with a preferred embodiment of the present invention, the verifier 50 reads the card 
identification number of the smart card 32 which is stored in the memory of the smart card. Moreover, upon 
Instruction from the security computer 10, as transmitted in the data packet, the verifier 50 and smart card 
32 perform an authentication process. 

25 The authentication process is illustrated in Fig, 6 and discussed in detail in U.S. Patent 4,748,668 to 
Shamir which is incorporated herein by reference. Smart card 32 has stored in it a card Identification 
number, denoted V in Fig 6, a second number, denoted 5, and a modulus N, which is also stored in verifier 
50. N is a public modulus which is a multiple of two values P and Q where P and Q are two prime numbers, 
typically of many digits, known only to the system which generates the smart cards. 5 is defined as: 

30 S = (VVrMod N (1) 

where the square root is performed as a modular square root. Modular arithmetic is discussed on pages 
268-278 of The Art of Computer Programming, Vol. 2:Seminumerical Algorithms , written by Donald E. Knuth 
and publishedbyAddison-Wesley Publishing Company, Reading, Massachusetts. 

The authentication process operates as follows. Verifier 50 requests a number X from smart card 32 

35 where X is defined as: 
X = R2*Mod N (2) 

where R is an arbitrary number. The verifier 50 then responds with a query bit Q. received from the security 
computer 10, whose value is randomly either 0 or 1. The smart card 32 then responds with a value Y where 

Y is defined as: 

40 Y = R if Q = 0 (3) 

Y = (R*SrMod N if Q = 1 (4) 

The smart card 32 Is authenticated if the verifier 50 calculates the following values for Y^. 
Y2 = X*Mod N if Q = 0 (5) 
Y2 = (X*VrMod N if Q = 1 (6) 
45 Where the verifier 50 received V from the smart card 32 prior to the authentication process. 

It Will be appreciated by persons skilled in the art that the present Inventions is not limited by what has 
been particularly shown and described hereinabove. Rather the scope of the present invention is defined 
only by the claims which follow: 

50 
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8B30 6574 861C 0000 F603 125F 4564 6974 5F62 

8b40 6c6l 636B 5F70 6163 6B65 7472 IDOG 0OF8 

30 8B50 0311 5F45 6469 7^5F 6475 6d62 5F70 6163 

8b60 6B65 7460 IFOO GOFA ©312 5F45 6469 7^5F 

8B70 736D 6172 745F 7061 636B 6574 CAGB C405 

8B80 8903 0A5F 5479 7065 5061 7261 6D84 2300 

8B90 OOOB 04l4 5F47 6574 5F44 756D 625F 6172 

35 8BA0 6561 5F66 6965 6C64 38OC C405 6EO3 095F 

8BB0 5479 7065 5F77 6477 3220 0000 FC03 125F 

8BC0 5275 6e4f 6E65 5061 7261 6D53 6372 6565 

8BD0 6e40 0CC4 056E O30E 5F44 756D 625F 6172 

8BE0 6561 5F77 6477 480C C405 AA03 0B5F 506I 

40 8BF0 636B 657^^ 5F77 6477 4222 0000 0904 0B5F 

8C00 5275 6E53 6372 6565 6E32 A02O 0000 FE03 

8C10 0B5F 5275 6E53 6372 6565 6E31 7Q0C c405 

8C20 ADO3 095F 5665 7250 6172 6I6D 8224 0000 

8C30 0E04 095F 6865 7874 6F62 696E DA24 0000 

45 8c40 1404 095F 6269 6E74 6F68 6578 2A11 C405 

. 8C50 8C03 0C5F 5665 7250 6172 616D 5363 722C 

8C60 11C4 05B4 O30B 5F42 6c6l 636B 506I 7261 

8C70 6D2G 2500 00AB 03OB 5F69 6E69 745F 7273 

8c80 3233 32IG 2BG0 0000 0405 5F68 656c 7084 

50 8C90 2700 O0D7 03OA 5F70 7269 6E74 5F73 7472 

8CA0 CE26 0000 CD03 0E5F 6765 745P 6669 6c65 

8CB0 5F6E 6i6D 65EE 2800 00E6 O3OB 5F50 7574 

8CC0 4d65 7373 6167 6542 2600 OOBC 0307 5F6d 

8CD0 6670 757** 7360 2600 00C2 O30B 5F47 657^ 

55 8CEG 5F6E 756D 6265 7272 2500 0OB5 030D 5F50 
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8CF0 7269 SBlk hSl5 SE'tC 696E 6566 2A00 0QF3 

8D0O 0306 5F47 657^^ 4b42 7829 0000 ED03 0B5F 

8D1G 4765 74^13 6f6E 6669 726D 5228 GOCG E1G3 

8D2G G95F 5G75 1^^5 1Z12 SFIZ 1E2G C405 GQGQ 

5 8D30 G65F 6564 617k 6iA0 2CC4 G5GQ 0004 5F65 

8040 6e64 line C405 0000 0B5F 5F61 6578 6974 

8D50 5F72 746E 661C C405 0000 075F 5F6I 6272 

8D6O 6B7O 161C C405 0000 O85F 5F61 6272 6B74 

8D70 6210 1CC4 0500 0008 5F5F 6173 697A 6473 

TO 8d80 AA2B OOGO GGOO O85F 5F61 7374 6172 7412 

8D9O 1CC4 G5GG 0008 5F5F 6174 6F7O 7370 661c 

8DAG C405 0OQ9 095F 5F61 6272 6B74 6265 3E2C 

8DBG OGGG GGQO 095F 5F63 696E 7444 4956 7698 

8DC0 0000 0100 0A5F 5F61 6372 7475 7365 644D 

IB 8DD0 2C0O 0000 O0OB 5F5F 6i6d 7367 5F65 7869 

8DEG 7489 1CC4 O5OO GGOB 5F5F 6F73 7665 7273 

8DFG 696F 6E81 1CC4 0500 0GG6 5F65 7272 6e6f 

8E0G 372D GOGO 0000 O65F 5F65 7869 74BO 1CC4 

8E10 0500 GGG7 5F5F 6368 696c 648E 1CC4 0500 

20 8E20 0007 5F5F 6E66 696c 655c 2C0O G00O 0007 

8E30 5F5F 6369 6E69 74a4 1CC4 G5G0 G0G7 5F5F 

8e4g 5F6i 7267 63B3 icc4 O500 0QG7 5F5F 696E 

8E50 746E 6F89 1CC4 Q5G0 OGGD 5F5F 646F 7376 

8e6G 6572 6d6i 6a6f 728c 1CC4 05GG 0GG7 5F5F 

25 8E70 6F73 6572 72A6 1CC4 05OO 0GO7 5F5F 5F61 

8e80 7267 768A icc4 0500 OOOD 5F5F 646F 7376 

8E90 6572 6D69 6e6f 72a8 icc4 0500 0008 5F65 

8EA0 6E76 6972 6f6e 901c c405 0000 085F 5f6f 

8EB0 7366 696c 658B 1CC4 0500 0008 5F5F 6F73 

30 8EC0 6D6F 6465 85IC C405 OOGO 085F 5F7G 737G 

8ED0 6164 7236 1FC4 G50G G008 5F5F 6670 696E 

8EE0 6974 B41C C405 0000 085F 5F6F 766C 7665 

8EF0 63AA 1CC4 0500 0008 5F5F 7067 6D70 7472 

8F00 681c C405 0000 095F 5F61 6366 696E 666F 

35 8F10 B21C C405 0000 095F 5F6F 766c 666c 6I67 

8F20 751c c405 0000 095F 5F6i 696E 7464 6976 

8F30 891c C405 0000 095F 5F6F 736d 6i6a 6F72 

8F40 8A1C C405 0000 095F 5F6f 736d 696E 6F72 

8F50 831c C405 OGGG 0A5F 5F75 6d61 736b 766I 

40 8f60 6C7C 2D00 0000 OOOA 5F5F 6374 6572 6D73 

8F70 7562 8cic c405 0000 0A5F 5F64 6F73 6572 

8F80 726E 6F79 1CC4 0500 0005 5F5F 6661 6320 

8F90 2D00 OGGG QGG5 5F65 7869 7487 1CC4 G500 

8FA0 0005 5F5F 7073 7OCC 2DO0 0000 OOOE 5F5F 

45 8FB0 4646 5F4d 5347 4241 4e4e 4552 B8IC C405 

8FC0 0000 095F 5F61 6462 676D 7367 7698 0000 

8FD0 0100 G95F 5F61 6372 746D 7367 EC2D 0000 

8FE0 0000 O85F 5F66 7074 7261 7OBA 1CC4 0500 

8FF0 0GO6 535^ '♦B48 5151 F22D 0000 OOGO O85F 

50 9000 5F63 686B 7374 6B08 2E00 0000 OOOB 5F5F 

9010 6E75 6C6C 6368 6563 6B2A 2EO0 OOOO 0QO9 

9020 5F5F 7365 7461 7267 76B8 2F00 0000 QGQ9 

9030 5F5F 7365 7465 6E76 7026 3000 0000 000B 

9040 5F5F 4E4D 5347 5F54 4558 5451 3000 0000 

55 9050 000c 5F5F 4E4D 5347 5F57 5249 5445 7A30 
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9060 0000 0000 095F 5f6d 7961 6c6c 6F63 BC30 

9070 0000 0000 095F 5F64 6F73 7265 7^30 DC30 

9080 0000 0000 0A5F 5F6D 6I7O 6572 726F 72CF 

9090 3000 0000 QQ0A 5F5F 646f 7372 657^ 6178 

5 90A0 CkSQ GOOO G000 0B5F 5F64 6F73 7265 7^75 

90B0 726E 1031 0000 0000 075F 6663 6c6f 7365 

90C0 CA31 0000 0000 095F 666c 7573 6861 6c6c 

9ODQ FC3I 0000 0000 065F 666F 7065 6E2H 3200 

90E0 0000 0007 5F66 7363 6I6E 661^2 3200 0000 

'0 90F0 0007 5F66 7772 697^^ 65D6 1CC4 0500 0008 

9100 5F5F 6366 6C75 7368 8228 C405 OOOO 075F 

9110 5F62 7566 696E 5825 C405 0000 085F 5F62 

9120 7566 6F75 7490 2AC>i 0500 0008 5P5F 6275 

9130 6665 7272 78ID C405 0000 065F 5F69 6F62 

15 9140 32F0 1DC4 0500 0009 5F5F 6c6l 737^ 696F 

9150 62D8 ICCH 0500 0005 5F5F 696F 627E 3300 

9160 0000 0008 5F5F 6669 6c62 7566 3E34 0000 

9170 0000 085F 5P66 6C73 6275 6694 3500 OOOO 

9180 0009 5F5F 6672 6565 6275 66C2 3500 OOOO 

20 9190 0008 5F5F 6765 7462 7566 2E36 OOOO 0000 

9IAO 0A5F 5F6f 7065 6e66 696c 65AA 3700 OOOO 

91B0 0007 5F5F 6674 6275 6626 3700 OOOO 0007 

91C0 5F5F 7374 6275 6640 3800 OOOO 0007 5F66 

9IDO 666c 7573 68AE 3800 OOOO 0007 5F5F 696E 

25 91E0 7075 74CA 4000 0000 0008 5F5F 6F75 7470 

9IFQ 7574 9249 GOOO 0000 0B5F 5F67 6574 7374 

9200 7265 616D CC49 OOOO 0000 075F 756E 6765 

9210 7463 384A 0000 OOOO O65F 636c 6F73 6558 

9220 4A00 OOOO 0006 5F6C 7365 656B DA4A OOOO 

30 9230 OOOO 0A5F 5P63 6F70 656E 7375 62D2 4A00 

9240 0000 0005 5F6F 7065 6E65 4C00 OOOO OOll 

9250 5F5F 6358 454e 4958 746F 444F 536D 6F64 

9260 6576 4CO0 OOOO 0005 5F72 656I 6454 4D0O 

9270 OOOO 0006 5F77 7269 7^65 7C4E GOOO 0000 

35 9280 0B5F 7374 6163 6b61 7661 696c 08IE C405 

9290 0000 075F 5F66 6D6F 6465 081E C405 OOOO 

92A0 O85F 5F69 6F6D 6F64 65AO 4E00 0000 0007 

92BQ 5F6D 6l6C 6C6F 638E 4E00 OGQO 0007 5F5F 

92C0 6e66 7265 65OA 1EC4 0500 0GG8 5F5F 6173 

40 92D0 6567 6473 A04E OOOO OOOO 095F 5F6E 6d6i 

92E0 6C6C 6F63 8e4E GOOO 0000 Q55F 6672 6565 

92F0 2850 OOOO 0000 0C5F 5F61 6d61 6c6C 6F63 

9300 6272 6bi4 1EC4 0500 0007 5F5F 6173 6567 

9310 311c 1EC4 0500 0007 5F5F 6173 6567 6816 

45 9320 1EC4 0500 0007 5F5F 6173 6567 6E18 1EC4 

9330 0500 0007 5F5F 6173 6567 7206 5000 0000 

9340 0008 5F5F 6i6d 6C69 6e6b ICIE C405 OOOO 

9350 G95F 5F51 4368 6461 7461 E94E GOOO OGGO 

9360 095F 5f6i 6d6i 6c6c 6F63 cc4f 0000 0000 

so 9370 0A5F 5F61 6D65 7870 616E 641A 1EC4 G5OO 

9380 GOOA 5F5F 616D 626c 6B73 697A 4850 OOOO 

9390 0000 075F 6272 6B63 7^6c 0C51 0000 0000 

93A0 075F 7374 7263 6174 4C51 0000 0000 075F 

93B0 7374 7263 7079 7E51 0000 0000 075F 7374 

ss 93C0 726c 656E 9A51 0GQG OGGO G85P 7374 726E 
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93DO 6361 74D0 5IOG 0000 0008 5F73 7^72 6e63 

93E0 7079 F851 0000 0000 085F 737^ 726E 636D 

93F0 7032 5200 0000 0005 5F61 7'^6f 6936 5200 

9400 0000 0007 5F5F 6361 7^6F 788A 5200 0000 

^ 9410 0005 5F69 7^6f 61A6 5200 OOOO 0006 5F75 

9420 6C74 6F6I BO52 0000 0000 O85F 746F 7570 

9430 7065 7220 1EC4 0500 OOOD 5F5F 6366 6C74 

9440 6376 745F 7461 622E 1EC4 050O 0008 5F5F 

9450 6173 697A 6543 2F1E C405 0000 085F 5F61 

^0 9460 7369 7A65 442C 1EC4 050O OOOB 5F5F 7369 

9470 6769 6E74 6F66 662A 1EC4 0500 OOOB 5F5F 

9480 7369 6769 6E74 7365 6730 1EC4 0500 0007 

9490 5F5F 6374 7970 6530 1EC4 0500 0008 5F5F 

94A0 6374 7970 655F C852 0000 0000 075F 6973 

^5 94BO 6174 7^79 F052 0000 0000 065F 6765 7^63 

94C0 68EC 5200 0000 0007 5F67 6574 6368 6532 

94D0 1FC4 0500 0007 5F5F 6368 6275 6608 5300 

94E0 0000 0006 5F69 6E74 3836 8653 0000 0000 

94F0 065F 6667 657^ 73DC 5300 0000 0006 5F66 

20 9500 7075 7473 2C54 0000 0000 085F 7370 7269 

9510 6E74 6682 5400 0000 GO07 5F73 7363 616E 

9520 66C0 5^00 0000 0009 5F6D 6F76 6564 6174 

9530 6IDE 5400 0000 0007 5F73 7^72 6368 7208 

9540 5500 0000 0007 5F6D 656D 6370 7934 5500 

25 9550 0000 0007 5F6D 656D 7365 746E 5500 0000 

9560 0007 5F5F 6378 746F 6162 5500 0000 OOOA 

9570 5F5F 636c 746F 6173 7562 C255 0000 0000 

9580 075F 7265 6d6f 7665 C255 0000 0000 075F 

9590 756E 6C69 6e6B DO55 0000 0000 0D5F 5F62 

30 95AO 696F 735F 6B65 7962 7264 E455 0000 0000 

95BO 0E5F 5F62 696F 735F 7072 696E 7465 72F8 

95CO 5500 0000 0010 5F5F 6269 6F73 5F73 6572 

95DO 6961 6C63 6f6d 0856 QOO0 0000 O85F 5F61 

95EO 4E6C 7368 6C14 5600 0000 OOOA 5F5F 6i4E 

35 95FO 4e61 6C73 686c Oioi 0080 Oioi 0080 0101 

9600 0080 0101 0080 0101 0080 0101 0080 0101 

9610 0080 0101 0080 0101 0080 0101 0080 0101 

9620 0080 0101 0080 0101 0080 0101 0080 0112 

9630 0079 4005 830F 0283 1002 8206 5F69 6f62 

40 9640 7566 6901 1000 7F83 AOOO 838I OO83 AOOO 

9650 8380 0083 8000 0120 0O7F 8204 5F7O 7^72 

9660 8800 8204 5F63 6E74 8802 8205 5F62 6173 

9670 6588 0482 055F 6660 6167 8806 8205 5F66 

9680 696c 6588 0701 0100 8001 ODOO 7A74 83OE 

45 9690 0282 O65F 696F 6275 6601 0100 8001 0100 

96AO 8001 0100 8001 0100 8001 0100 8001 0100 

96BO 8001 0100 8001 0100 8001 0100 8OOI 0100 

96CO 8001 0100 8001 0100 8001 0100 8001 0100 

96D0 8001 0100 8001 0100 8001 0100 8001 0100 

50 96EO 8001 0100 8001 0100 8001 0100 8001 0100 

96FO 8001 0100 8001 0100 8001 0100 8001 0100 

9700 8001 0100 8001 0100 8001 0100 8001 0100 

9710 8001 0100 8001 0100 8001 0100 8001 0100 

9720 8001 0100 8001 0100 8001 0100 8001 0100 

55 9730 8001 0100 8001 0100 8001 0100 8001 0100 
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97^0 8001 0100 8001 OlOQ 8001 0100 8001 0100 

9750 8001 0100 8001 OIGQ 8001 0100 8G01 0100 

9760 8001 0100 8001 G100 8001 0100 8G01 OIGG 

9770 8001 0100 8001 0100 8001 0100 8001 OlOO 

s 9780 8001 0100 8001 0100 8001 0100 8001 0100 

9790 8001 0100 8001 0100 8G01 0100 8001 0100 

97AO 8001 0100 8001 0100 8001 0100 8001 0100 

97BG 8001 0100 80G1 G10G 8001 010G 8G01 GIGG 

97C0 8001 0100 8001 0100 8001 0100 8001 0100 

" 97D0 8001 0100 8001 OIGO 8001 0100 8001 0100 

97E0 8001 0100 8001 OIQO 8001 0100 8001 0100 

97FO 8001 0100 8001 0100 8001 0100 8Q01 0100 

9800 8001 0100 8001 0100 8001 OlOO 8001 0100 

9810 8001 0100 8001 0100 80Q1 9100 8001 0100 

" 9820 8001 0100 8001 0100 8001 0100 8001 0100 

9830 8001 0100 8001 0100 8001 0100 8001 0100 

SQliQ 8001 0100 8001 0100 8OOI 0100 8OOI 0100 

9850 8001 0100 80G1 0100 8001 QlOO 8001 0100 

9860 8001 0100 8001 0100 8001 0100 8OOI 0100 

20 9870 8001 0100 8001 0100 8001 0100 8G01 OlOO 

988G 8001 0100 8001 G10O 8001 0100 8G01 0100 

9890 8001 0100 8001 0100 8001 0100 8001 0100 

98AO 8001 0100 8001 0100 8001 0100 8001 0100 

98BO 8001 0100 8001 0100 8001 0100 8001 0100 

25 98CO 8001 0100 8001 0100 8001 0100 8OOI 0100 

98DO 8001 0100 8OGI 0100 8001 0100 8001 0100 

98EO 8001 0100 8001 0100 8001 0100 8OOI 0100 

98FO 8001 0100 8001 0100 8001 0100 8001 0100 

9900 8001 0100 8001 G100 8001 0100 8G01 GIGG 

30 9910 8001 0100 8001 0100 8001 0100 8001 0100 

9920 8001 0100 8001 0100 8001 0100 8001 0100 

9930 8001 0100 8001 0100 8001 0100 8001 0100 

99^0 8001 0100 8001 0100 8001 0100 8001 0100 

9950 8001 0100 80G1 0100 8001 0100 8G01 0100 

35 9960 8001 0100 8001 0100 8OOI 0100 8001 OlOO 

9970 8001 0100 8001 0100 8001 0100 8001 OlOO 

9980 8OGI 0100 8001 0100 8001 0100 8001 0100 

9990 8G01 0100 8001 0100 8001 0100 8G01 0100 

99AO 8001 GlOO 8001 0100 8OOI 0100 8OOI 0100 

40 99B0 8001 0100 8001 0100 8001 QlOO 8OOI 0100 

99C0 8001 0100 8001 0100 8001 0100 8001 0100 

99DG 8001 0100 80G1 G100 8001 O10G 8001 GIGG 

99E0 8001 0100 8001 0100 8001 0100 8001 0100 

99F0 8001 0100 8001 0100 8001 0100 8001 OlOO 

45 9AO0 8001 0100 8001 0100 8001 0100 8001 0100 

9A10 8001 0100 8001 0100 8001 0100 8GG1 OlOQ 

9A20 8001 0100 8001 0100 8001 0100 8001 G1G0 

9A30 8001 0100 8001 0100 8OOI 0100 8OOI 0100 

9Ai|0 8001 0100 8001 0100 8001 0100 8001 0100 

50 9A50 8001 OlOQ 8001 0100 8001 0100 8001 QlOO 

9A60 8001 0100 8001 0100 8OOI 0100 8OOI 0100 

9A70 8001 0100 8001 0100 8001 0100 8001 0100 

9A80 8001 0100 8001 0100 8001 0100 8001 0100 

9A90 8001 0100 80G1 0100 8001 0100 8G01 0100 

55 9AA0 8001 0100 8001 0100 8001 GIGG 8GG1 0100 
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10 



15 



20 



25 



30 



35 



40 



45 



50 



55 



9AB0 
9AC0 

9AD0 
9AE0 
9AF0 
9B00 
9B10 
9B20 

9B30 

9B40 

9B50 
9B60 
9B70 
9B80 
9B90 
9BA0 
9BB0 
9BC0 
9BD0 
9BB0 
9BF0 
9C00 
9C10 
9C20 
9C30 
9cto 
9C50 
9C60 
9C70 
9C80 
9C90 
9CA0 

9CB0 

9CC0 

9CD0 
9CE0 
9CF0 
9D00 
9D10 
9D20 
9D30 
9D40 
9D50 
9D60 
9D70 
9D80 
9D90 
9DA0 
9DB0 
9DC0 
9DD0 
9DE0 
9DF0 
9E00 
9E10 



8001 
8001 
80Q1 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
80G1 
8001 
0382 
0116 
838i| 
8800 
0382 
8805 
OlOQ 
0100 
0100 
0100 
0100 
0100 

7885 
8603 

7F83 
8385 
0082 
8802 
8204 
7388 
0950 
8500 
7261 
0080 
0080 

8503 
8001 

5F53 
0101 
0107 
8000 
8000 
0078 
0078 



0100 
0100 
0100 
0100 
0100 
0100 
0100 
0100 
0100 
0100 
0100 
010G 
0100 
0100 
0100 
0100 
0100 
0100 
0100 
G1Q0 
0100 

GC57 
0G7F 

0083 
8201 

8205 

8001 
8001 
8001 
8001 
8001 
8001 
C800 
8387 
8400 
0083 
0368 
8203 
7^79 
OAOl 

4152 

0111 

6D73 
0101 
0101 
8205 
1000 
4352 
0080 

0078 

0105 
0105 
4G83 
1083 



8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
80G1 
8GG1 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 

8384 
8400 
7888 
797G 
7469 
0100 
0100 
0100 
0100 
0100 
0700 
8380 
0382 

8384 

8303 
5F78 
665F 
7065 
1500 
4i4d 
007F 
8800 
0080 

0080 

504l 

0101 
0101 
85A0 
0078 
0078 
8QGG 
8GQ0 



0100 

0100 

GIGG 

GIGG 

GIGO 

0100 

0100 

OlOQ 

0100 

0100 

0100 

0100 

0100 

0100 

0100 

0100 

0100 

0100 

0100 

0100 

1800 

444F 

0083 

83A0 

0182 

6588 

746c 

8001 

8001 

8001 

8001 

8001 

7685 

OGOl 

0550 

GG83 

G13A 

8801 

7888 

8808 

79IG 

5F53 

820C 

0101 

0101 

GlGl 

5241 

8388 

0080 

0080 

1483 

2083 

5883 

0105 

0105 



8001 
8001 
8GG1 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8001 
8GG1 
8001 
8001 
8001 
8G01 
8001 
8001 

79^0 
575F 
8400 
0001 

0168 
0482 
6588 
0100 
GIGG 

0100 
0100 
0100 
2003 
1300 
4152 
A4G0 
007F 
8206 
0482 
8207 
0183 
4352 
6B6D 

0080 

0080 
0080 
4D01 
0382 
0101 
0101 

8503 

8000 
8000 
GG78 
0078 



0100 
GIGG 
GIGG 
GIGG 
GIGG 
0100 
0100 
0100 
G100 
0100 
0100 
0100 
0100 
0100 
0100 
0100 
GIGG 
0100 
GIGG 
GIGO 

G783 
4652 
8384 
2F00 
88Q2 
0566 
0601 
8001 
8001 
8001 
8001 
8001 
8384 
7985 
4i4d 
8384 
8203 
6865 
0376 
6F70 
8903 
6901 
5F6f 
0101 
0101 

010c 

0100 
095G 
0080 
0080 
0105 
0105 
0101 

7G83 
6883 



8001 
8001 
80G1 
8GG1 
8001 
8001 
8001 
8001 
8G01 
8001 
8001 
8001 
8001 
8G01 
8001 
8001 
8001 
8001 
8001 
8001 
6BG3 
414D 
0083 
7F82 
8201 
7261 
0100 
0100 
0100 
0100 
0100 
0100 

0301 
7003 
6901 

0083 
685F 
6164 
6l6c 

7469 
838A 
o4oo 
665F 

0080 
0080 
0G7A 
8001 
4152 
0101 
0101 
GG78 
0078 
0080 
8000 
8GGG 



GIGG 
GIGG 
GIGG 
GIGG 
GIGG 
OlOG 
0100 
OlOG 
010G 
OlOG 
0100 
G1G0 
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Annex D: Protocol For Communication Between Verifier and Data demodulator 

The data demodulator and verifier chip are connected by means of a parallel 8 bit link. The data 
demodulator is the master and the verifier Is the slave. The hand-shaking requests 4 control lines: 
RWN: read/write output from the data demodulator; 
SENDN: output from the data demodulator; 
ACKN: output from the verifier chip; 
RESET: reset line from the verifier chip. 



Writing a byte to the verifier chip: 

The timing traces for data from the data demodulator to the verifier are shown on the next page. The 
verifier is in input mode with its data lines in high impedance. When the data demodulator is ready to send 
a byte, it sets RWN and SENDN to 0, after having tested if ACKN is high. At the same time, it outputs the 
data on the bus. After having stored the data, the verifier chip asserts it by setting ACKN to 0. Then the 
data demodulator sets SENDN to 1 and releases the data bus. To end the transfer, the verifier chip sets 
ACKN to1. 

The verifier chip has to answer to the SENDN request before a time-out (T4 max). In case the data 
demodulator does not receive an acknowledge, (ACKN = 0) within this time, it releases the data bus and 
sets SENDN to 1. 
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Reading a byte from the verifier chip: 

The timing traces for data from the verifier chip to the data demodulator are shown herelnbelow. When 
the decoder needs data and if ACKN is high, it sets RWN to 1 and SENDN to 0. When the verifier is ready 
to send, it outputs the data and clears ACKN, in order to infrom that the data is valid. After the data 
demodulator has stored the data, it sets SENDD to 1 . Then the verifier chip releases the data bus to high 
impedance and sets ACKN to 1 as soon as possible. There is no time-out security provided in this case. 

The data demodulator is the master since it is synchronout with the TV lines. The use of the ACKN line 
allows a slow CPU for the verifier chip. 
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Software Specifications: 



Data demodulator to Verifier Chip: 

After the acquisition of a packet, the data demodulator transmits it to the verifier chip. The transfer 
between the two chips is done in the manner shown below. 
I DATA PACKET (32 bytes) | INFO 1 1 ACK | 
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The DATA PACKET Is comprised of 32 corrected bytes dedicated to the verifier chip. This Information 
is received, data demodulator and corrected by the data demodulator. 

The INFO byte is one byte long. It contains information from the data demodulator for the verifier and Is 
sent by the data demodulator. Bit 0 is used as a PUSH bit. A value of 1 indicates that a validation push 
5 button on the TV was pushed for more than three seconds. The data demodulator sends this Information 
only one time and waits for the key to be depressed. In order to inform the user that his order has been 
accepted, the state of the displayed information will be changed (e.g. to a blinking mode) after the pushed 
button has been detected. Bits 1-7 are not currently used. 

The ACK byte is sent by the verifier chip after the data demodulator sends the 33 bytes of data packet 
70 and INFO to verify that the data was received. If bit 0 is set to 1 then the verifier chip received the 33 bytes. 
If bit 0 is set to 0, the data demodulator sends the 33 bytes repeatedly until the bit is set to 1. Bits 1-7 are 
not currently used. 

In case a time-out occurs during the packet transfer, the data demodulator attempts to send this byte 
again until the transfer succeeds. In order to be ready for the loading of a new control word, if there is no 
75 sufficient time to complete the packet transfer, the data demodulator will cancel the transfer and RESET the 
verifier chip before the key changeover occurs. 



Verifier chip to data demodulator: 

90 

10ms before the control word chages (line 0, 64, 128 or 192), the data demodulator asks for the new 
control word. Whatever happens, the verifier chip as to answer. Therefore, line SENDN should be 
connected to an interrupt line from the verifier chip. The data format of the answer is shown below. 
I CONTROL WORD (8 bytes) | L | OSD | 
25 The 8 bytes of the CONTROL WORD contain the result of the smart card computation. 

The L byte is one byte long indicating the length of an on-screen display, if L is 0, then the data 
demodulator has to switch off a device (OSD - on screen display Inserter) for displaying the on screen 
display. If L is between 0 and 255, the data demodulator will receive an on screen message whose length is 
L. If L is 255, the OSD remains in its current state. 
30 The L OSD bytes contain the information to be displayed by the OSD. 

The verifier chip pin setup is shown on the next page. 
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Claims 



1. A systenn for controlling access to broadcast transmissions comprising: 
35 a transmitter having a transmission encoder for scrambling a broadcast; and 

a multiplicity of subscriber receivers, each comprising: 

an identical receiving decoder, containing no secret cryptographic keys, for descrambling said broadcast; 
and 

a plurality of selectable and portable executing means each being operatively associatable with a receiving 
40 decoder at a partially different given time and each executing generally identical operations to generate a 
seed for use by said associated receiving decoder to enable said receiving decoder to descramble said 
broadcast. 

2. A system as in claim 1 and wherein said executing means Includes means for actively executing an 
algorithm. 

46 3. A system as in claim 1 and wherein said executing means includes means for providing instructions and 
data for an algorithm executed in said decoder. 

4. A system as in claim 1 and wherein said executing means includes means for providing all Instructions 
required to descramble said transmission. 

5. A system as in claim 1 and wherein said executing means includes means for providing a portion of 
50 instructions required to descramble said transmission. 

6. A system as in claim 1 and wherein said executing means comprises means for providing proof of 
authenticity to said receiving decoder. 

7. A system as in claim 6 and wherein said executing means comprises a public key proof of authenticity. 

8. A system as in claim 6 and wherein said executing means comprises a Fiat-Shamir public key proof of 
65 authenticity. 

9. A system as in claim 1 and wherein each executing means contains a separate identification element 
which is sensible by a decoder. 

10. A system as in claim 1 and wherein each executing means comprises an element which indicates 
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programming entitlements to said decoder. 

11. A system as in claim 10 and wherein said element which indicates programming entitlements to said 
decoder is modified by information contained in said transmitted broadcast. 

12. A system as in claim 1 and wherein said decoder comprises a mailbox for receiving data from 
6 broadcast transmissions and from a first of said plurality of selectable and portable executing means. 

13. A system as in claim 12 and wherein said executing means is operative to access said mailbox. 

14. A system as in claim 12 and wherein said data from broadcast transmissions and from said first of said 
plurality of selectable and portable executing means comprises entitlement information and activation data 
for enabling operation of said new apparatus removably associatable with said decoder. 

10 15. A system as in claim 1 and wherein said executing means may contain information which can be 
accessed by said decoder for modifying software thereof. 

16. A system as in claim 1 and wherein said executing means comprises means for generating displayed 
messages via said decoder. 

17. A system as in claim 1 and wherein said decoder is operative to generate displayed messages 
15 originating from any of the following sources: said broadcast said decoder and said executing means. 

18. A system as in claim 16 and wherein said displayed messages may be assigned designated priorities. 

19. A system for transferring information comprising: 

a plurality of portable card means each comprising microprocessor means for generating and transmitting 
data to be stored; and 

20 fixed storage means for receiving said data from a first of said plurality of card means, for storing said data, 
and for enabling a second of said plurality of card means to remove said data therefrom. 

20. A system for transferring information comprising: 

computing means for generating and transmitting a first set of data to be stored; 

a plurality of portable card means each comprising microprocessor means for generating and transmitting a 
25 second set of data to be stored; and 

fixed storage means for receiving at least one of said first and second data from said computing means and 
a first of said plurality of card means, for storing said information, and for enabling a second of said plurality 
of card means to remove said at least one of said first and second data therefrom. 
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